Add ContactInfo struct to DomainInfo and extract contact data (registrant, admin, tech) from both RDAP and WHOIS responses. Introduce a new domain_contact checker that compares actual contact fields against user-specified expected values, with redaction detection for privacy-protected domains. The WHOIS observation provider now also exposes contact data so the new rule can reuse the same lookup as domain_expiry.
159 lines
4.4 KiB
Go
159 lines
4.4 KiB
Go
// This file is part of the happyDomain (R) project.
|
|
// Copyright (c) 2020-2025 happyDomain
|
|
// Authors: Pierre-Olivier Mercier, et al.
|
|
//
|
|
// This program is offered under a commercial and under the AGPL license.
|
|
// For commercial licensing, contact us at <contact@happydomain.org>.
|
|
//
|
|
// For AGPL licensing:
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
|
|
package domaininfo
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"time"
|
|
|
|
"git.happydns.org/happyDomain/model"
|
|
|
|
"github.com/openrdap/rdap"
|
|
)
|
|
|
|
func GetDomainRDAPInfo(ctx context.Context, domain happydns.Origin) (*happydns.DomainInfo, error) {
|
|
client := &rdap.Client{}
|
|
req := rdap.NewDomainRequest(string(domain)).WithContext(ctx)
|
|
resp, err := client.Do(req)
|
|
var domainInfo *rdap.Domain
|
|
if err == nil {
|
|
var ok bool
|
|
domainInfo, ok = resp.Object.(*rdap.Domain)
|
|
if !ok {
|
|
err = fmt.Errorf("RDAP response is not a Domain object")
|
|
}
|
|
}
|
|
if err != nil {
|
|
if ce, ok := err.(*rdap.ClientError); ok && ce.Type == rdap.ObjectDoesNotExist {
|
|
return nil, happydns.ErrDomainDoesNotExist
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
return mapRDAPDomain(domainInfo)
|
|
}
|
|
|
|
// mapRDAPDomain converts an RDAP Domain object into a DomainInfo. Kept
|
|
// separate from the network call so the mapping can be unit-tested without
|
|
// touching the registry.
|
|
func mapRDAPDomain(domainInfo *rdap.Domain) (*happydns.DomainInfo, error) {
|
|
// Registrar
|
|
registrar := "Unknown"
|
|
var registrarURL *string
|
|
for _, ent := range domainInfo.Entities {
|
|
if ent.Roles != nil {
|
|
for _, role := range ent.Roles {
|
|
if role == "registrar" && ent.VCard != nil && len(ent.VCard.Get("fn")) > 0 {
|
|
registrar = ent.VCard.Get("fn")[0].Value.(string)
|
|
if len(ent.VCard.Get("url")) > 0 {
|
|
registrarURL = sanitizeURL(ent.VCard.Get("url")[0].Value.(string))
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Dates
|
|
var expiration *time.Time
|
|
var creation *time.Time
|
|
for _, event := range domainInfo.Events {
|
|
if (event.Action == "expiration" || event.Action == "registration") && event.Date != "" {
|
|
date, err := time.Parse(time.RFC3339, event.Date)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if event.Action == "expiration" {
|
|
expiration = &date
|
|
} else if event.Action == "registration" {
|
|
creation = &date
|
|
}
|
|
}
|
|
}
|
|
|
|
// Nameservers
|
|
var nameservers []string
|
|
for _, nameserver := range domainInfo.Nameservers {
|
|
if nameserver.UnicodeName != "" {
|
|
nameservers = append(nameservers, nameserver.UnicodeName)
|
|
} else {
|
|
nameservers = append(nameservers, nameserver.LDHName)
|
|
}
|
|
}
|
|
|
|
name := domainInfo.UnicodeName
|
|
if name == "" {
|
|
name = domainInfo.LDHName
|
|
}
|
|
|
|
// Contacts
|
|
rdapRoleMap := map[string]string{
|
|
"registrant": "registrant",
|
|
"administrative": "admin",
|
|
"technical": "tech",
|
|
}
|
|
contacts := make(map[string]*happydns.ContactInfo)
|
|
for _, ent := range domainInfo.Entities {
|
|
if ent.VCard == nil || ent.Roles == nil {
|
|
continue
|
|
}
|
|
for _, role := range ent.Roles {
|
|
key, ok := rdapRoleMap[role]
|
|
if !ok {
|
|
continue
|
|
}
|
|
ci := &happydns.ContactInfo{
|
|
Name: ent.VCard.Name(),
|
|
Email: ent.VCard.Email(),
|
|
Street: ent.VCard.StreetAddress(),
|
|
City: ent.VCard.Locality(),
|
|
Province: ent.VCard.Region(),
|
|
PostalCode: ent.VCard.PostalCode(),
|
|
Country: ent.VCard.Country(),
|
|
Phone: ent.VCard.Tel(),
|
|
}
|
|
if props := ent.VCard.Get("org"); len(props) > 0 {
|
|
if s, ok := props[0].Value.(string); ok {
|
|
ci.Organization = s
|
|
}
|
|
}
|
|
contacts[key] = ci
|
|
}
|
|
}
|
|
|
|
var contactsPtr map[string]*happydns.ContactInfo
|
|
if len(contacts) > 0 {
|
|
contactsPtr = contacts
|
|
}
|
|
|
|
return &happydns.DomainInfo{
|
|
Name: name,
|
|
Nameservers: nameservers,
|
|
CreationDate: creation,
|
|
ExpirationDate: expiration,
|
|
Registrar: registrar,
|
|
RegistrarURL: registrarURL,
|
|
Status: domainInfo.Status,
|
|
Contacts: contactsPtr,
|
|
}, nil
|
|
}
|